Cyber risk management through structured processes of identification, analysis, evaluation, treatment, and continuous monitoring of cyber threats. Includes frameworks like ISO 27005, NIST RMF, quantitative and qualitative methodologies, risk appetite, risk tolerance, and strategies for mitigation, transfer, acceptance, or elimination of risk.